Method, device and system for managing a provision of energy

ABSTRACT

A remote server is connected to at least one energy box, each energy box being connected to at least one energy consuming device, and each energy box being connected to a metering device. The remote server sends to the energy box a transaction demand. The energy box sends to at least one energy consuming device an energy consumption reduction request. The metering device measures energy consumption of the energy consuming device. The metering device sends to the energy box the measured energy consumption. The energy box verifies whether the demanded transaction has been carried out based upon at least one test, the test depending on at least one measured energy consumption. If the demanded transaction has been carried out, the energy box sends to a remote server a transaction response.

FIELD OF THE INVENTION

The invention relates generally to a method for managing a provision ofenergy.

Furthermore, the invention also pertains to a device for managing aprovision of energy.

Finally, the invention also pertains to a system for managing aprovision of energy.

STATE OF THE ART

It is known that, when there is an electricity consumption peak, anenergy supplier requests a service provider to reduce an energyconsumption. The energy is delivered, over an energy transport networkor termed grid, to a consumer.

A remote server that is operated by the service provider is connected,via a data communication network, to a fleet of energy boxes.

The energy boxes are located within either factory premises or houses ofpeople. Each energy box manages a switch-off of one or several electricheaters, pool pumps and/or an household electrical appliance(s), asenergy consuming devices. The energy box is connected to the energyconsuming devices.

The remote server transmits to one or several energy boxes a transactiondemand, like a request for switching-off energy consumption that ismanaged by each solicited energy box.

The energy consumption is measured and transmitted to the serviceprovider the day after a transmission of the transaction demand.

However, the service provider knows precisely the measured energyconsumption at a client (or consumer) side.

There is a need to provide a solution that allows knowing whether thesent transaction demand has been or has not been taken into account at aclient side while protecting a privacy of the client.

SUMMARY OF THE INVENTION

The invention proposes a solution for satisfying the just herein abovespecified need by providing a method for managing a provision of energy.

According to the invention, at least a first remote server beingconnected to at least one energy box, each energy box being connected toat least one energy consuming device, each energy box being connected toa metering device, the method comprises the following steps:

the first remote server sends to at least one energy box a transactiondemand, as a first energy consumption reduction request;

the energy box sends to at least one energy consuming device at leastone second energy consumption reduction request;

the metering device measures at least one energy consumption of the atleast one energy consuming device;

the metering device sends to the energy box at least one measured energyconsumption;

the energy box or a first device connected to the energy box verifieswhether the demanded transaction has not been or has been carried out atleast in part based upon at least one test, the at least one testdepending on at least one measured energy consumption; and

if the demanded transaction has been carried out at least in part, thenthe energy box or the first device sends to the first remote server or asecond remote server a transaction response.

The principle of the invention is to:

receive, at a client side, from a remote server a transaction demand orrequest,

request to one (or several) connected device(s) to reduce its(their)energy consumption,

check whether the demanded transaction has been executed at leastpartly, and

if so, send to the server (or another one) a transaction response.

It is noteworthy that a check consists in performing one (or several)test(s) thanks to one (or several) measurement(s) of energy consumptionof one (or several) energy consuming device(s).

An energy box carries out the test(s) and, when the test(s) is(are) moreor less conclusive, also informs the soliciting server (or anotherserver) by transmitting this latter a corresponding transactionresponse.

A token, as device connected to the energy box, may carry out, insteadof the energy box, the test(s) and, when the test(s) is(are) more orless conclusive, also informs the soliciting server (or another server)by transmitting it a corresponding transaction response.

Thus, a server receives the transaction response that corresponds to thesent transaction demand. The received transaction response is thereforeassociated with the demanded transaction. The received transactionresponse depends on the sent transaction demand and a result of thetest(s) that is(are) carried out at the client side. The server becomestherefore aware that the sent transaction demand has been taken intoaccount.

It is to be noted that no measured energy consumption is transmitted tothe server.

The invention allows to ensure that a reduction of an energy consumptionhas occurred thanks to a reception of a transaction demand at a clientside and to inform a server with a corresponding transaction responsewithout disclosing any measured energy consumption at the client side.

According to a further aspect, the invention is a device for managing aprovision of energy.

According to the invention, the device being connected to a first remoteserver, the device being connected to at least one energy consumingdevice, the device being connected to a metering device, the device isadapted to:

receive a transaction demand, as a first energy consumption reductionrequest;

send to at least one energy consuming device at least one second energyconsumption reduction request;

receive at least one measured energy consumption;

verify whether the demanded transaction has not been or has been carriedout at least in part based upon at least one test, the at least one testdepending on at least one measured energy consumption; and

send, if the demanded transaction has been carried out at least in part,to the first remote server or a second remote server a transactionresponse.

As device, it may be an energy box or a token.

Within the present description, an energy box is a computer device thatis intended to communicate with the outside world.

According still to a further aspect, the invention is a system formanaging a provision of energy.

According to the invention, the system comprises at least one firstremote server, at least one energy box, at least one energy consumingdevice and at least one metering device, each energy box being connectedto the first remote server, each energy box being connected to at leastone energy consuming device, each energy box being connected to ametering device. The first remote server is adapted to send to at leastone energy box a transaction demand, as a first energy consumptionreduction request. The metering device is adapted to:

measure at least one energy consumption of the at least one energyconsuming device;

send to the energy box at least one measured energy consumption.

And the energy box is adapted to send to at least one energy consumingdevice at least one second energy consumption reduction request. Theenergy box or a first device connected to the energy box is adapted toverify whether the demanded transaction has not been or has been carriedout at least in part based upon at least one test, the at least one testdepending on at least one measured energy consumption; and send, if thedemanded transaction has been carried out at least in part, to the firstremote server or a second remote server a transaction response.

As token, it may be a Universal Serial Bus (or USB) type dongle, a smartcard, as removable token, to be coupled to an energy box or a chipintended to be fixed, possibly in a removable manner, to an energy box,as hosting device.

BRIEF DESCRIPTION OF THE DRAWINGS

Additional features and advantages of the invention will be more clearlyunderstandable after reading a detailed description of one preferredembodiment of the invention, given as an indicative and non-limitativeexample, in conjunction with the following drawings:

FIG. 1 illustrates a simplified diagram of one embodiment of a systemfor managing a provision of energy, by using notably one remote server,an energy box connected to both the server and one energy consumingdevice whose energy consumption is surveyed by a metering device andundergoes one test(s) to be satisfied at a client side, according to theinvention; and

FIG. 2 represents an example of one message flow between notably theserver, as issuer of a transaction demand, the energy box, the energyconsuming device, the metering device of FIG. 1, so as to generate, whenthe test(s) is(are) satisfied, a corresponding transaction response anddeliver it to the server.

DETAILED DESCRIPTION

Herein under is considered a case in which the invention method formanaging a provision of energy is implemented by, among others, at aclient side, a USB type dongle, as removable token and device formanaging a provision of energy, that is coupled to an energy box.

However, according to another implementation (not represented), anenergy box is a standalone entity and constitutes a device for managinga provision of energy that carries out functions that are carried out bythe token and that are described infra.

Within the present description, a token is a smart object that isintended to communicate with the outside world.

Naturally, the herein below described embodiment is only forexemplifying purposes and is not considered to reduce the scope of theinvention.

For example, instead of being a USB type dongle, the token may be asmart card or any other electronic medium that may have different formfactors while including a chip.

According to another example, the token may also be a chip soldered,possibly in a removable manner, to an energy box, as hosting device.

FIG. 1 shows schematically a system 10 for managing a provision ofenergy.

Such a system 10 includes a central remote server 12 and, at a client100 side, an energy box 14, one household appliance 16, as energyconsuming device, a USB type dongle 18, as removable token and firstdevice, and a metering device 110.

The household appliance 16 may include a pool pump, a heater, a washingmachine, a tumble-dryer, a dish washer or other device that needselectricity, as energy, to work.

For sake of simplicity, the energy box 14, the energy consuming device16, the USB type dongle 18 are termed hereinafter the box 14, theconsuming device 16 and the token 18.

As to energy, it may be, among others, electricity, gas and/or any otherfluid, like water, that allows a consuming device to operate.

A client 100 user may have subscribed a service for managing a provisionof energy. A corresponding client 100 system may be located in anindividual's house or a factory.

It is to be noted that only one client 100 system is represented forclarity reason. However, the server 12 controls a plurality (or fleet)of client systems preferably via their corresponding associated tokens.

Only one household appliance 16 is represented for clarity reason.However, the box 14 may be connected to several consuming devices underthe control of the box 14 or the token 18.

The server 12 is connected, through a bi-directional cable link 11, toone (or several) data communication network(s) 112, such as an Internetnetwork.

The server 12 may be included within an OTA (acronym for “Over The Air”)and/or an OTI (for “Over The Internet”) platform(s).

The box 14 is connected to the data communication network 112.

The server 12 plays preferably a role of a manager of tokens, as devicesfor managing a provision of energy. The server 12 manages the tokenscoupled to boxes.

According to such a preferred embodiment, each box 14 is controlled bythe token 18.

Alternately, the server 12 manages a fleet of boxes, as devices formanaging a provision of energy. According to such an embodiment, theboxes carry out functions that are carried out by the associated tokens.

The server 12, as first server, is a computer and includes amicroprocessor (not represented), as data processing means.

The server 12 supports an application that, when running, allowsproviding a service for managing a provision of energy. Such a servicefor managing a provision of energy may be implemented, so as to decreasean energy consumption at the client 100 side. The service is executed,for instance, during a consumption load peak or for a delay of anactivity. The delay of an activity allows moving or shifting aconsumption load away from a consumption load peak.

The server 12 includes or accesses a memory (not represented), as servermemory.

The server memory registers one or several addresses, as identifiers ofits interlocutors, be it either tokens or boxes.

According to one preferred embodiment, the server memory registers datarelating to each token that is coupled to a box of a fleet.

Alternatively, the server memory stores data relating to a plurality (orfleet) of boxes.

The server memory may register at least one key to be used forencrypting and/or decrypting data for each token 18 managed by theserver 12. Thus, the server 12 (and its interlocutor) is able to protectdata to be exchanged with either a token 18 or a box 14, as serverinterlocutor. The key may be a public key related to either the token 18or the box 14, as server interlocutor.

The server 12 is able to transmit a transaction demand, as a firstenergy consumption reduction request.

The transaction demand may be an order or request for switching off,i.e. stopping, at least in a temporary manner, a provision of energy toone or several consuming devices or an order or request for reducing, atleast in a temporary manner, energy provided to one or several consumingdevices.

The server 12 (more exactly the server memory) stores preferably atleast one key Ks shared with either a token 18 or a box 14, as serverinterlocutor.

Optionally, prior to a sending of the transaction demand from the server12 to each token 18 as its interlocutor, the server 12 is arranged tosign the transaction demand. Such a signature allows authenticating (orproving that) a sender of the transaction demand, namely the server 12.To sign the transaction demand, the server 12 uses a predeterminedsignature algorithm, like a Rivest Shamir Adleman (or RSA) algorithm,and a predetermined signature key that are both stored within the servermemory. The signature key is preferably related to the server 12, asprivate key. The interlocutor, either the token 18 or the box 14,verifies a corresponding signed transaction demand by using apredetermined signature verification algorithm and a predeterminedsignature verification key that are both stored within the serverinterlocutor memory. The signature verification key is preferably apublic key relating to the server 12 that has been deduced from theserver private key. According to one particular embodiment, thesignature algorithm and the signature verification algorithm are one andthe same algorithm, like a Message Authentication Code (or MAC)algorithm and the signature key and the signature verification keyconstitute one and the same key, as a symmetric key and a key sharedbetween the server 12 and its interlocutors, namely a fleet of tokens orboxes. According to another embodiment, the signature key and thesignature verification key are one and the same specific symmetric keywhile being different for each token or box. Thus, if one specificsymmetric key is fraudulently used, then the use of the specificsymmetric key does only concern one server interlocutor (and not all theserver interlocutors).

According to an important feature of the invention, the server 12 isable to receive a transaction response associated with a senttransaction demand that has been sent by the server 12.

The server 12 may be able to delegate to another server (notrepresented) a reception of a transaction response.

The transaction response is preferably received if the demandedtransaction has been completed or carried out at least in part at aclient 100 side.

The transaction response may be received irrespective of whether thedemanded transaction has been or has not been carried out at a client100 side. In other words, the server 12 receives a transaction responsenot only when the demanded transaction demand has been carried out atleast in part but also when the demanded transaction demand has not beencarried out at all.

The transaction response may include a status a corresponding value ofwhich is predetermined and shared between a sender of the transactionresponse and the server 12 that has to interpret the transactionresponse. Such a transaction response status allows determining whetherthe demanded transaction has not been or has been carried out at leastin part at the client 100 side, i.e. by the token 18 and/or the box 14.

The transaction response may include information that indicates acompletion level, i.e. how much the demanded transaction has beencarried out at least in part at the client 100 side.

The transaction response does not include any information relating to ameasured energy consumption.

Thanks to a received transaction response, the server 12 may becomeaware of either a partial or total completion or no-completion of thedemanded transaction at a client 100 side.

The transaction response may include a result of one or several teststhat have been carried out by the token 18 or the box 14.

The result with respect to the demanded transaction is thus known to theserver 12, as addressee of the transaction response, due to a data valuerelating to the transaction response corresponding to the senttransaction demand.

The box 14 is connected, over a wire or wireless link 13, to the datacommunication network 112.

When wireless, the link 13 may relate to a long range Radio-Frequency(or RF) link(s). The RF link(s) may be fixed at several hundreds of MHz,for instance, around 850, 900, 1800, 1900 MHz, 2 GHz or more.

Such a link 13, be it wire or wireless, enables to exchange data in twoways between the box 14 and the data communication network 112.

The box 14 is preferably an intermediary entity, i.e. plays a role of arelay, between the server 12 and the token 18, so as to receive by thetoken 18 a transaction demand, complete (or not) at least in part by thetoken 18 a demanded transaction and send from the token 18 acorresponding transaction response, when applicable.

The box 14 acts as a modulator-demodulator (or modem), i.e. that carriesout the two following operations:

a modulation of an analogical carrier signal to encode digitalinformation, as transaction response, to be transmitted, possibly overan antenna (not represented), to the server 12 (or another server), and

a demodulation of a received analogical carrier signal to decode encodeddigital information, as transaction demand, that is received, possiblyover an antenna (not represented), from the server 12.

The box 14 may be an intermediary entity between, on one hand, theconsuming device 16 and/or the metering device 110, and, on the otherhand, the token 18.

Alternately, instead of two separated entities, the box and the meteringdevice constitute one and the same entity.

The box 14 is connected to the household appliance 16, as singleconsuming device.

The box 14 is connected to the metering device 110.

The box 14 includes a microprocessor (not represented), as means forprocessing data, at least one memory (not represented) for storing dataand at least one input/output (or I/O) interface (not represented) forexchanging data with the outside of the box 14.

The box 14 microprocessor (instead of a token 18 microprocessor) mayallow to interpret a first energy consumption reduction request, as acommand originating from outside of the box 14, and to send to at leastone consuming device 16 a second energy consumption reduction request,as a result of an interpretation of the received command.

The box 14 is able to communicate with the connected consuming device 16while using a predetermined communication protocol.

The box 14 is able, preferably under a token 18 control, to command theconsuming device 16 to shut off or reduce its energy consumptiondepending on the first consumption reduction request issued from theserver 12.

The box 14 includes an I/O interface which uses, for instance, a USBtype protocol for exchanging data with the token 18.

The box 14 includes an I/O interface that uses, for instance, a SerialPeripheral Interface (or SPI) type protocol for exchanging data with themetering device 110.

The metering device 110 is connected to an energy distribution network(not represented).

The metering device 110 measures an energy consumption of the wholehouse or factory, i.e. an energy consumption of all the consumingdevices included within the house or factory.

According to another embodiment, the metering device is connected toeach consuming device to be controlled in energy consumption. Accordingto such an embodiment, the metering device is connected, through atleast a mono-directional link, to the consuming device. Such a link maybe wire or contact-less. This link may be bi-directional. Thus, themetering device is able to retrieve information issued from a particularconsuming device amongst all the consuming devices.

The metering device 110 includes a microprocessor (not represented), asmeans for processing data, at least one memory (not represented) forstoring data and at least one I/O interface (not represented) forexchanging data with the outside of the box 14.

The metering device 110 measures, preferably in a periodic manner, anenergy consumption of the set of the consuming device(s) 16 managed atthe client 100 side.

The metering device 110 (more exactly the metering device memory) storespreferably at least one key shared with either the token 18 or the box14, as metering device interlocutor.

The metering device 110 stores preferably an integrity algorithm to beused to apply to data before its sending. Data resulting from such anintegrity operation allows its addressee to verify that data has notbeen modified.

The metering device 110 stores each measured energy consumption.

The metering device 110 is connected, through a bi-directional wire orcontact-less link 111, to the box 14.

The metering device 110 is able to send to the box 14 one or severalmeasured energy consumptions. The metering device 110 sends preferablyto the box 14 each measured consumption just after a correspondingmeasurement.

Optionally, prior to a sending of a measured energy consumption from themetering device 110 to the box 14, the metering device 110 is arrangedto sign the measured energy consumption. Such a signature allowsauthenticating the metering device 110 as sender of the measured energyconsumption. To sign the measured energy consumption, the meteringdevice 110 uses a predetermined signature algorithm and a predeterminedsignature key that are both stored within the metering device memory.The signature key is preferably related to the metering device 110, asprivate key. The interlocutor, either the token 18 or the box 14,verifies a corresponding signed transaction demand by using apredetermined signature verification algorithm and a predeterminedsignature verification key that are both stored within a metering deviceinterlocutor memory. The signature verification key is preferably apublic key relating to the metering device 110 that has been generatedfrom the metering device private key.

Optionally, prior to a sending of a measured energy consumption from themetering device 110 to the box 14, the metering device 110 is arrangedto apply to the measured energy consumption an integrity algorithm to beused to protect the measured energy consumption in its integrity. Thus,either the token 18 or the box 14, as the metering device interlocutor,is able to detect whether the received measured energy consumption hasor has not been modified.

According to another embodiment, instead of the metering device 110, asecond device (not represented), like another token that is coupled orconnected to the metering device 110, is arranged to sign a measuredenergy consumption to be sent and/or to apply to a measured energyconsumption to be sent an integrity algorithm.

The token 18 is coupled to the box 14, as hosting device.

The token 18 is connected, through a bi-directional contact link 17, tothe box 14.

According to another embodiment (not represented), the token 18 isconnected, through a contact-less link, i.e. a short range RF link, tothe box 14. Such a short range RF link is used for exchanging betweenthe box 14 and the token 18 data at a short range distance typicallyfrom around 20 em (such as with a Near Field Communication (or NFC) typetechnology) until around 800 m (such as with a Bluetooth typetechnology). The RF link may be fixed, for instance, at 13.56 MHz forNFC with a range up to around 20 em, at 2.4-2.5 GHz with a range ofabout 10 m to about 100 m (for Zigbee (e.g. IEEE 802.15.4), Wifi andBluetooth or Bluetooth low energy (e.g. IEEE 802.15.1)), from around 2.4GHz to around 10 GHz (for Ultra Wide Band or UWB e.g. IEEE 802.15.4a).

The token 18 includes a chip (not represented). The chip includes atleast one microprocessor 182, as data processing means, at least onememory 184 and at least one I/O interface 186 that are internally allconnected, through an internal bidirectional data bus 183, to eachother.

The token I/O interfaces 186 allow communicating data from the internalchip components to the chip exterior and conversely.

The token microprocessor 182 processes, controls and communicatesinternally data, with all the other components incorporated within thechip and, through the I/O interfaces 186, with the chip exterior.

The token microprocessor 182 executes or runs one (or several)application(s). The application(s) is(are) stored within the tokenmemory 184.

As application, there is at least one application for managing aprovision of energy.

The token microprocessor 182 is preferably able to initiate actions, inorder to interact directly with the outside world, in an independentmanner of the box 14. Such a capacity of interaction at the initiativeof the token 18 is also known as proactive capacity. The token 18 isthus able to send, at its own initiative, through the box 14, to anydevice connected to the box 14, for instance, a proactive command forsending either a command, like a second energy consumption reductionrequest, to the consuming device 16, or information, like a transactionresponse, to the server 12.

The token microprocessor 182 executes preferably security functions.

The token microprocessor 182 may allow to interpret a first energyconsumption reduction request, as a command originating from outside ofthe token 18, and to send to at least one consuming device 16 a secondenergy consumption reduction request, as a result of an interpretationof the received command. According to such an embodiment, the token 18sends, through the box 14, to the connected consuming device 16, eitheran order (or request) for switching off a provision of energy or anorder for reducing a provision of energy, as second energy consumptionreduction request.

The token 18 is preferably adapted to receive a transaction demand andone or several measured energy consumptions.

The token 18 is preferably arranged to carry out one or severalpredetermined tests. Each test depends on one or several measured energyconsumptions to be received.

According to an important feature of the invention, the token 18 is ableto verify whether a demanded transaction to be received has not been orhas been carried out at in least in part based upon one or severaltests.

The token 18 is further adapted to send to an identified server acorresponding transaction response if the demanded transaction doessatisfy the tests.

The token memory 184 may store data relating to a Uniform ResourceIdentifier (or URI), a Uniform Resource Locator (or URL) and/or anInternet Protocol (or IP) address of a first (remote) server from whicha transaction demand is to be received.

The token memory 184 may store data relating to a URI, a URL and/or anIP address of a second server (not represented) to which a correspondingtransaction response is to be transmitted.

The first server and the second server constitute preferably one and thesame server 12.

Alternately, the first server and the second server are two separatedservers.

The token 18 may be able to manage a white/black server list, asserver(s) which is(are) authorized/forbidden to be an interlocutor(s)for getting data from it(them).

The token memory 184 may store credentials of a token user.

The credentials may include a subscriber identifier(s), like anInternational Mobile Subscriber Identifier (or IMSI), and one or severalkeys, like ki, allowing to identify and authenticate a subscriber to oneor several radio communication network(s). The credentials are used forauthenticating the token user to a concerned external entity(ies) whichallow(s) updating a content of the token memory 184.

The credentials may comprise an identifier and/or a password. The token18 may be arranged to submit automatically the credentials to a suitableserver(s), so as to allow accessing a service managed by the server(s)which manage(s) a transaction demand to be sent and/or a correspondingtransaction response to be received.

The token memory 184 may store at least one key to be used forencrypting and/or decrypting data, in order to protect data to beexchanged, in a confidential manner, with an external entity, like theserver 12, as token interlocutor.

The token memory 184 stores preferably at least one key Ks shared withthe server 12.

The security functions include preferentially an encryption/decryptionprocess to be used before sending data to outside/after receiving datafrom outside, so as to protect access to data managed by the token 18.To encrypt data to be sent, the token 18 uses an encryption key and anencryption algorithm, such as an Advanced Encryption Standard (or AES),a Data Encryption Standard (or DES) or the like, that are stored withinthe token memory 184. To decrypt data to be received, the token 18 mayuse a decryption key and a decryption algorithm, such as an AES, a DESor the like, that are stored within the chip memory 164.

The security functions include preferentially a data signature processto be used before sending data, like a transaction response, to outside,so as to prove an origin of data originating from the token 18. To signdata, the token 18 uses a predetermined signature algorithm and apredetermined signature key that are both stored within the token memory184. The signature key is preferably related to the token 18, as privatekey. The interlocutor, namely the server 12 or the consuming device 16,verifies a corresponding signed transaction response by using apredetermined signature verification algorithm and a predeterminedsignature verification key that are both stored within the interlocutormemory. The signature verification key is preferably a public keyrelating to the token 18 that has been deduced from the token privatekey. According to one embodiment, the signature key and the signatureverification key constitute one and the same key, as a key sharedbetween the token 18 and its interlocutor(s), namely the server 12 andpossibly the consuming device 16.

The security functions include preferably an integrity control processto be used to data after its reception, so as to detect whether receiveddata is or is not modified.

The security functions include preferably an integrity applicationprocess to be used to data before its sending, so as to allow acorresponding addressee to detect whether sent data is or is notmodified.

FIG. 2 depicts an exemplary embodiment of the invention method 20 formanaging a provision of energy that involves the server 12, the box 14,the consuming device 16, the token 18 and the metering device 110.

It is assumed that the token 18 controls the box 14, at least for anysecurity function, like a data decryption, a data integrity control, adata signature or a data encryption, to be carried out each time the box14 has received data from outside or has to send data to outside.

Optionally, the token 18 sends, through the box 14, to the server 12 amaximum load shifting capacity (not represented). Thus, the server 12 isable to define a first energy consumption request, as transactiondemand, in a specific manner, while taking into account the maximum loadshifting capacity.

The server 12 sends to the box 14 a transaction demand 22, as firstenergy consumption request. The transaction demand may be expressed inkilowatt (or KW).

Prior to a sending of the transaction demand, the server 12 may generatea signed transaction demand and send to the box 14 the signedtransaction demand.

The box 14 sends to the token 18 the received transaction demand 24.

If the received transaction demand is signed, then the token 18 verifiesthat its sender is the server 12. If the sender is or is not the server12, then the token 18 authorizes or forbids to reduce respectively anenergy consumption with respect to a transaction demand.

It is assumed that the metering device 110 has been activated and thereis only one consuming device 16 that operates and is surveyed accordingto the embodiment described in relation with FIG. 1.

The metering device 110 measures, in a periodic manner, like everyminute, an energy consumption of all the consuming devices includedwithin the house or factory, i.e. the consuming device 16, as the soleconsuming device at the client 100 side. The metering device 110 storesa measured energy consumption, as total energy consumed at the clientside.

Prior to a sending of a second energy consumption reduction request, themetering device 110 sends to the box 14, as soon as a first measurementis carried out, a measured energy consumption 25, as measured firstenergy consumption.

The token 18 may determine how many consuming devices and which one(s)the token 18 has to control so as to reduce an energy consumption whilekeeping up with the transaction demand. The token 18 may store a list ofconsuming device(s), possibly according to a priority order, that acorresponding user authorizes to switch off or power in a reduce manner.

It is assumed that only one consuming device 16 is working and is to becontrolled, so as to satisfy the transaction demand. It means thateither the consuming device 16 is to be shut off or its energyconsumption is to be reduced.

The token 18 generates, for instance, a request for stopping, at leastin a temporary manner, like a few hours, a provision of energy consumingdevice, as a corresponding second energy consumption reduction request.

The second energy consumption reduction request is different, in itsform, from the first energy consumption reduction request.

Alternatively, the token 18 generates a request for reducing, such as acut of a few kW, at least in a temporary manner, like a few hours, aprovision of energy consuming device, as a corresponding second energyconsumption reduction request.

The token 18 sends to the box 14 the second energy consumption reductionrequest 26.

The box 14 transmits to the token 18 the measured first energyconsumption 27.

The box 14 sends to the consuming device 16, as third energy consumptionreduction request, a command 28 for reducing an energy consumption.

The third energy consumption reduction request may be different, in itsform, from the second energy consumption reduction request and the firstenergy consumption reduction request.

The third energy consumption reduction request may be identical to thesecond energy consumption reduction request.

The consuming device 16 shuts off.

Alternately, depending on the second energy consumption reductionrequest, the consuming device 16 decreases its energy consumption whileworking when the consuming device 16 supports such a function.

After a sending of the second energy consumption reduction request 26,the metering device 110 sends to the box 14, as soon as a secondmeasurement is carried out, a measured energy consumption 210, asmeasured second energy consumption.

The box 14 sends to the token 18 the measured second energy consumption212.

The token 18 carries out one or several tests.

Alternatively, the box 14 carries out one or several tests. According tosuch an alternative, the box 14 does not have to transmit to the token18 any measured energy consumption.

The test(s) allow(s) determining, once a transaction demand has beenreceived, whether an energy consumption has or has not been reduced.

The token 18 then verifies whether the demanded transaction has not beenor has been carried out at least in part at the client 100 side whileanalysing whether the test(s) is(are) or is(are) not satisfied.

As test, the token 18 may compare the measured second energy consumptionand the measured first energy consumption.

If the measured second energy consumption is less than the measuredfirst energy consumption, then the token 18 sends to the server 12 acorresponding transaction response 214.

Prior to a sending of the transaction response, the token 18 maygenerate a signed transaction response and send to the server 12 thesigned transaction response.

As test, the token 18 may compare a predetermined first threshold withan arithmetic difference between the measured second energy consumptionand the measured first energy consumption.

If the arithmetic difference is greater than or equal to the firstthreshold, then the token 18 sends to the server 12 a correspondingfirst transaction response.

The transaction response may include data representative of a result ofat least one test.

The transaction response is associated with the transaction demand.

The transaction response does not indicate any energy consumption at theconcerned client 100 system. At the most, the server 12 knows that theenergy consumption at the client side has been reduced in a manner moreor less compliant with the transaction demand. In such a case, theprivacy of the user or consumer is respected and the server 12 is notable to know which consuming device 16 has reduced possibly its energyconsumption and what kind of consuming device has been involved so as toreduce an energy consumption at the concerned client 100 system.

Based upon the received transaction response, the box 14 transmits tothe server 12 a corresponding transaction response 216.

The box 14 and the server 12 exchange data by using a HyperText TransferProtocol (or HTTP) type protocol. The box 14 and the server 12 may useany other data exchange protocol allowing to exchange data.

If the received transaction response is signed, then the server 12verifies whether its sender is the token 18. If the sender is or is notthe token 18, then the server 12 authorizes or forbids to recognizerespectively that an energy consumption with respect to a transactiondemand has been taken into account. If the server 12 authorizes torecognize that an energy consumption has been decreased, then the server12 sends to a user of the client 100 system a payment request. Theserver 12 may not know a breakdown of the energy consumption of theconsuming device(s) thus protecting the privacy of the user.

The embodiment that has just been described is not intended to limit thescope of the concerned invention. Other embodiments may be given. Asanother embodiment example, instead of exchanging only with the server12, the box 14 receives a transaction demand originating from the server12 and sends to another server (not represented) a correspondingtransaction response still originating from the token 18.

The invention claimed is:
 1. A method for managing a provision ofenergy, wherein, at least a first remote server is connected to at leastone energy box, each energy box being connected to at least one energyconsuming device, and each energy box being connected to a meteringdevice, the method comprising the following steps: the first remoteserver sends to at least one energy box a transaction demand, as a firstenergy consumption reduction request; the energy box sends to at leastone energy consuming device at least one second energy consumptionreduction request; the metering device measures at least one energyconsumption of the at least one energy consuming device; the meteringdevice sends to the energy box at least one measured energy consumption;the energy box or a first device connected to the energy box verifieswhether the demanded transaction has not been or has been carried out atleast in part based upon at least one test, the at least one testdepending on at least one measured energy consumption; and if thedemanded transaction has been carried out at least in part, then theenergy box or the first device generates and sends to the first remoteserver or a second remote server a signed transaction response, whereinthe transaction response does not disclose measured energy consumptioninformation and wherein the signed transaction response proves an originof the transaction response.
 2. The method according to claim 1, whereinthe at least one test comprises a comparison between a measured secondenergy consumption and a measured first energy consumption, the firstenergy consumption being measured prior to a sending of the at least onesecond energy consumption reduction request, the second energyconsumption being measured after a sending of the at least one secondenergy consumption reduction request, and if the measured second energyconsumption is less than the measured first energy consumption, then theenergy box or the first device sends to the first remote server or thesecond remote server a transaction response.
 3. The method according toclaim 1, wherein the at least one test comprises a comparison between ameasured second energy consumption and a measured first energyconsumption, the first energy consumption being measured prior to asending of the at least one second energy consumption reduction request,the second energy consumption being measured after a sending of the atleast one second energy consumption reduction request, and if themeasured second energy consumption is less than the measured firstenergy consumption, then the energy box or the first device generates asigned transaction response, and the energy box or the first devicesends to the first remote server or the second remote server the signedtransaction response.
 4. The method according to claim 1, wherein, theat least one test comprising a comparison between at least onepredetermined first threshold and an arithmetic difference between ameasured second energy consumption and a measured first energyconsumption, the first energy consumption being measured prior to asending of the at least one second energy consumption reduction request,the second energy consumption being measured after a sending of the atleast one second energy consumption reduction request, and if thearithmetic difference is greater than or equal to the first threshold,then the energy box or the first device sends to the first remote serveror the second remote server a first transaction response.
 5. The methodaccording to claim 1, wherein the metering device signs at least onemeasured energy consumption and the metering device sends to the energybox at least one signed measured energy consumption.
 6. The methodaccording to claim 1, wherein, the metering device is connected to asecond device, the second device signs at least one measured energyconsumption and the second device sends to the metering device at leastone signed measured energy consumption.
 7. The method according to claim1, wherein, prior to a sending of at least one measured energyconsumption from the metering device to the energy box, the meteringdevice applies to the at least one measured energy consumption anintegrity algorithm, and the energy box or the first device verifies theintegrity of the at least one measured energy consumption.
 8. The methodaccording to claim 1, wherein, prior to a sending of the transactiondemand from the first remote server to the at least one energy box, themethod further includes a step in which the energy box or the firstdevice sends to the first remote server a maximum load shiftingcapacity.
 9. A device for managing a provision of energy, wherein, thedevice is connected to a first remote server, the device being connectedto at least one energy consuming device, the device being connected to ametering device, and wherein the device is configured to: receive atransaction demand, as a first energy consumption reduction request;send to at least one energy consuming device at least one second energyconsumption reduction request; receive at least one measured energyconsumption; verify whether the demanded transaction has not been or hasbeen carried out at least in part based upon at least one test, the atleast one test depending on at least one measured energy consumption;and generate and send, if the demanded transaction has been carried outat least in part, to the first remote server or a second remote server asigned transaction response, wherein the transaction response does notdisclose measured energy consumption information and wherein the signedtransaction response proves an origin of the transaction response.
 10. Asystem for managing a provision of energy, wherein the system comprisesat least one first remote server, at least one energy box, at least oneenergy consuming device and at least one metering device, each energybox being connected to the first remote server, each energy box beingconnected to at least one energy consuming device, each energy box beingconnected to a metering device, wherein the first remote server isconfigured to send to at least one energy box a transaction demand, as afirst energy consumption reduction request; wherein the metering deviceis configured to: measure at least one energy consumption of the atleast one energy consuming device; send to the energy box at least onemeasured energy consumption; and wherein the energy box is configuredto: send to at least one energy consuming device at least one secondenergy consumption reduction request; and wherein the energy box or afirst device connected to the energy box is configured to: verifywhether the demanded transaction has not been or has been carried out atleast in part based upon at least one test, the at least one testdepending on at least one measured energy consumption; and generate andsend, if the demanded transaction has been carried out at least in part,to the first remote server or a second remote server a signedtransaction response, wherein the transaction response does not disclosemeasured energy consumption information and wherein the signedtransaction response proves an origin of the transaction response.